Warning: Permanently added '[localhost]:15101' (ED25519) to the list of known hosts.
2025/08/09 19:47:04 ignoring optional flag "sandboxArg"="0"
2025/08/09 19:47:05 parsed 1 programs
syzkaller login: [ 89.126051][ T5343] cgroup: Unknown subsys name 'net'
[ 89.216802][ T5343] cgroup: Unknown subsys name 'cpuset'
[ 89.223833][ T5343] cgroup: Unknown subsys name 'rlimit'
[ 90.980559][ T5343] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.992697][ T10] cfg80211: failed to load regulatory.db
[ 95.098566][ T5358] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 95.838093][ T5368] chnl_net:caif_netlink_parms(): no params data found
[ 95.910197][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.914246][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.917566][ T5368] bridge_slave_0: entered allmulticast mode
[ 95.921689][ T5368] bridge_slave_0: entered promiscuous mode
[ 95.929904][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.933754][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.937110][ T5368] bridge_slave_1: entered allmulticast mode
[ 95.940869][ T5368] bridge_slave_1: entered promiscuous mode
[ 95.970055][ T5368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.978858][ T5368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.008884][ T5368] team0: Port device team_slave_0 added
[ 96.015073][ T5368] team0: Port device team_slave_1 added
[ 96.037832][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.040910][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.054955][ T5368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.061583][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.065183][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.077889][ T5368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.117451][ T5368] hsr_slave_0: entered promiscuous mode
[ 96.120973][ T5368] hsr_slave_1: entered promiscuous mode
[ 96.280563][ T5368] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.290150][ T5368] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.308698][ T5368] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.316443][ T5368] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.350186][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.353614][ T5368] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.357552][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.360639][ T5368] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.425514][ T5368] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.446935][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.451596][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.468637][ T5368] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.478968][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.482536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.498267][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.501527][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.696184][ T5368] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.737809][ T5368] veth0_vlan: entered promiscuous mode
[ 96.748398][ T5368] veth1_vlan: entered promiscuous mode
[ 96.779590][ T5368] veth0_macvtap: entered promiscuous mode
[ 96.787640][ T5368] veth1_macvtap: entered promiscuous mode
[ 96.807419][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.816848][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.830506][ T1040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.841845][ T1040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.859363][ T1040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.876209][ T1040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.969119][ T5368] syz-executor (5368) used greatest stack depth: 19704 bytes left
[ 97.020995][ T1040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.075824][ T1040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.123894][ T1040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.245454][ T1040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.270671][ T5396] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 97.276260][ T5396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 97.280044][ T5396] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 97.286024][ T5396] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 97.289512][ T5396] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.929659][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.945433][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.977680][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.981162][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.461148][ T1040] bridge_slave_1: left allmulticast mode
[ 99.473032][ T1040] bridge_slave_1: left promiscuous mode
[ 99.476194][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.538586][ T1040] bridge_slave_0: left allmulticast mode
[ 99.541300][ T1040] bridge_slave_0: left promiscuous mode
[ 99.584779][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.152943][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.159778][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.166973][ T1040] bond0 (unregistering): Released all slaves
[ 100.274738][ T1040] hsr_slave_0: left promiscuous mode
[ 100.279364][ T1040] hsr_slave_1: left promiscuous mode
[ 100.283556][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.287152][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.291615][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.303723][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.316993][ T1040] veth1_macvtap: left promiscuous mode
[ 100.319673][ T1040] veth0_macvtap: left promiscuous mode
[ 100.323936][ T1040] veth1_vlan: left promiscuous mode
[ 100.326257][ T1040] veth0_vlan: left promiscuous mode
[ 100.616741][ T1040] team0 (unregistering): Port device team_slave_1 removed
[ 100.635518][ T1040] team0 (unregistering): Port device team_slave_0 removed
2025/08/09 19:47:22 executed programs: 0
[ 103.829601][ T4700] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 103.834433][ T4700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 103.838579][ T4700] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 103.843606][ T4700] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 103.847079][ T4700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 104.234201][ T5487] chnl_net:caif_netlink_parms(): no params data found
[ 104.355071][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.358937][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.367800][ T5487] bridge_slave_0: entered allmulticast mode
[ 104.382328][ T5487] bridge_slave_0: entered promiscuous mode
[ 104.386592][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.389580][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.403391][ T5487] bridge_slave_1: entered allmulticast mode
[ 104.407534][ T5487] bridge_slave_1: entered promiscuous mode
[ 104.476856][ T5487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.494688][ T5487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.545907][ T5487] team0: Port device team_slave_0 added
[ 104.564408][ T5487] team0: Port device team_slave_1 added
[ 104.605092][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.608545][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.639710][ T5487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.657543][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.660629][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.679635][ T5487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.763315][ T5487] hsr_slave_0: entered promiscuous mode
[ 104.776345][ T5487] hsr_slave_1: entered promiscuous mode
[ 105.480742][ T5487] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.486221][ T5487] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.503320][ T5487] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.515298][ T5487] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.683059][ T5487] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.724067][ T5487] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.735297][ T54] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.738462][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.764937][ T54] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.767957][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.894837][ T5396] Bluetooth: hci0: command tx timeout
[ 106.188179][ T5487] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.275368][ T5487] veth0_vlan: entered promiscuous mode
[ 106.304038][ T5487] veth1_vlan: entered promiscuous mode
[ 106.348771][ T5487] veth0_macvtap: entered promiscuous mode
[ 106.385644][ T5487] veth1_macvtap: entered promiscuous mode
[ 106.421656][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.453090][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.484016][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.489446][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.502112][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.506681][ T54] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.624920][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.628507][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.687476][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.691021][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.804571][ T5546] loop0: detected capacity change from 0 to 512
[ 106.833553][ T5546] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 106.839158][ T5546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 106.879567][ T5546] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 106.906075][ T5546] EXT4-fs (loop0): 1 truncate cleaned up
[ 106.909767][ T5546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 106.961213][ T5546] ==================================================================
[ 106.964840][ T5546] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8e9/0x1e20
[ 106.968527][ T5546] Read of size 18446744073709551572 at addr ffff88801a2ac850 by task syz.0.17/5546
[ 106.973386][ T5546]
[ 106.974320][ T5546] CPU: 0 UID: 0 PID: 5546 Comm: syz.0.17 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full)
[ 106.974336][ T5546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 106.974342][ T5546] Call Trace:
[ 106.974351][ T5546]
[ 106.974356][ T5546] dump_stack_lvl+0x189/0x250
[ 106.974374][ T5546] ? __kasan_check_byte+0x12/0x40
[ 106.974387][ T5546] ? __pfx_dump_stack_lvl+0x10/0x10
[ 106.974397][ T5546] ? lock_release+0x4b/0x3e0
[ 106.974412][ T5546] ? __virt_addr_valid+0x4a5/0x5c0
[ 106.974425][ T5546] print_report+0xca/0x240
[ 106.974434][ T5546] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 106.974445][ T5546] kasan_report+0x118/0x150
[ 106.974456][ T5546] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 106.974468][ T5546] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 106.974479][ T5546] kasan_check_range+0x2b0/0x2c0
[ 106.974489][ T5546] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 106.974499][ T5546] __asan_memmove+0x29/0x70
[ 106.974509][ T5546] ext4_xattr_set_entry+0x8e9/0x1e20
[ 106.974525][ T5546] ext4_xattr_block_set+0x872/0x2ac0
[ 106.974537][ T5546] ? fs_reclaim_acquire+0x7d/0x100
[ 106.974553][ T5546] ? __pfx_check_xattrs+0x10/0x10
[ 106.974566][ T5546] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 106.974580][ T5546] ? ext4_xattr_block_find+0x2d4/0x350
[ 106.974593][ T5546] ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[ 106.974616][ T5546] __ext4_expand_extra_isize+0x30d/0x400
[ 106.974633][ T5546] __ext4_mark_inode_dirty+0x46c/0x700
[ 106.974646][ T5546] __ext4_unlink+0x631/0xab0
[ 106.974658][ T5546] ? __pfx___ext4_unlink+0x10/0x10
[ 106.974669][ T5546] ? __pfx___dquot_initialize+0x10/0x10
[ 106.974685][ T5546] ? down_write+0x162/0x1f0
[ 106.974767][ T5546] ext4_unlink+0x216/0x5d0
[ 106.974776][ T5546] vfs_unlink+0x394/0x650
[ 106.974787][ T5546] do_unlinkat+0x345/0x560
[ 106.974796][ T5546] ? __pfx_do_unlinkat+0x10/0x10
[ 106.974805][ T5546] ? getname_flags+0x1e5/0x540
[ 106.974821][ T5546] __x64_sys_unlink+0x47/0x50
[ 106.974831][ T5546] do_syscall_64+0xfa/0x3b0
[ 106.974843][ T5546] ? lockdep_hardirqs_on+0x9c/0x150
[ 106.974854][ T5546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.974863][ T5546] ? clear_bhb_loop+0x60/0xb0
[ 106.974874][ T5546] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.974884][ T5546] RIP: 0033:0x7fa79d18ebe9
[ 106.974895][ T5546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 106.974903][ T5546] RSP: 002b:00007ffd54591a38 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 106.974925][ T5546] RAX: ffffffffffffffda RBX: 00007fa79d3b5fa0 RCX: 00007fa79d18ebe9
[ 106.974932][ T5546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[ 106.974938][ T5546] RBP: 00007fa79d211e19 R08: 0000000000000000 R09: 0000000000000000
[ 106.974944][ T5546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.974949][ T5546] R13: 00007fa79d3b5fa0 R14: 00007fa79d3b5fa0 R15: 0000000000000001
[ 106.974960][ T5546]
[ 106.974964][ T5546]
[ 107.099959][ T5546] Allocated by task 5546:
[ 107.101903][ T5546] kasan_save_track+0x3e/0x80
[ 107.104310][ T5546] __kasan_kmalloc+0x93/0xb0
[ 107.106543][ T5546] __kmalloc_node_track_caller_noprof+0x271/0x4e0
[ 107.109131][ T5546] kmemdup_noprof+0x2b/0x70
[ 107.110934][ T5546] ext4_xattr_block_set+0x781/0x2ac0
[ 107.113014][ T5546] ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[ 107.115594][ T5546] __ext4_expand_extra_isize+0x30d/0x400
[ 107.118227][ T5546] __ext4_mark_inode_dirty+0x46c/0x700
[ 107.120878][ T5546] __ext4_unlink+0x631/0xab0
[ 107.123637][ T5546] ext4_unlink+0x216/0x5d0
[ 107.125380][ T5546] vfs_unlink+0x394/0x650
[ 107.127058][ T5546] do_unlinkat+0x345/0x560
[ 107.128937][ T5546] __x64_sys_unlink+0x47/0x50
[ 107.130787][ T5546] do_syscall_64+0xfa/0x3b0
[ 107.132781][ T5546] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.135123][ T5546]
[ 107.136163][ T5546] The buggy address belongs to the object at ffff88801a2ac800
[ 107.136163][ T5546] which belongs to the cache kmalloc-1k of size 1024
[ 107.142959][ T5546] The buggy address is located 80 bytes inside of
[ 107.142959][ T5546] 1024-byte region [ffff88801a2ac800, ffff88801a2acc00)
[ 107.148234][ T5546]
[ 107.149224][ T5546] The buggy address belongs to the physical page:
[ 107.151955][ T5546] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1a2ac
[ 107.155395][ T5546] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 107.159370][ T5546] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 107.162729][ T5546] page_type: f5(slab)
[ 107.164578][ T5546] raw: 00fff00000000040 ffff88801a441dc0 dead000000000122 0000000000000000
[ 107.168018][ T5546] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 107.171533][ T5546] head: 00fff00000000040 ffff88801a441dc0 dead000000000122 0000000000000000
[ 107.175608][ T5546] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 107.179512][ T5546] head: 00fff00000000002 ffffea000068ab01 00000000ffffffff 00000000ffffffff
[ 107.183725][ T5546] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 107.187633][ T5546] page dumped because: kasan: bad access detected
[ 107.190151][ T5546] page_owner tracks the page as allocated
[ 107.192481][ T5546] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5546, tgid 5546 (syz.0.17), ts 106935881253, free_ts 103505578915
[ 107.201500][ T5546] post_alloc_hook+0x240/0x2a0
[ 107.203545][ T5546] get_page_from_freelist+0x21e4/0x22c0
[ 107.205960][ T5546] __alloc_pages_slowpath+0x2fe/0xce0
[ 107.208176][ T5546] __alloc_frozen_pages_noprof+0x319/0x370
[ 107.210635][ T5546] allocate_slab+0x65/0x370
[ 107.212976][ T5546] ___slab_alloc+0xbeb/0x1410
[ 107.215447][ T5546] __kmalloc_node_noprof+0x2fd/0x4e0
[ 107.218106][ T5546] alloc_slab_obj_exts+0x39/0xa0
[ 107.220653][ T5546] __memcg_slab_post_alloc_hook+0x31e/0x7f0
[ 107.223519][ T5546] __kmalloc_node_track_caller_noprof+0x335/0x4e0
[ 107.226408][ T5546] kstrdup+0x42/0x100
[ 107.228238][ T5546] alloc_vfsmnt+0xeb/0x430
[ 107.230236][ T5546] vfs_create_mount+0x6c/0x3d0
[ 107.232482][ T5546] do_new_mount+0x3ec/0x9e0
[ 107.234613][ T5546] __se_sys_mount+0x317/0x410
[ 107.236890][ T5546] do_syscall_64+0xfa/0x3b0
[ 107.239124][ T5546] page last free pid 5477 tgid 5477 stack trace:
[ 107.242455][ T5546] __free_frozen_pages+0xbc4/0xd30
[ 107.244817][ T5546] __slab_free+0x303/0x3c0
[ 107.246811][ T5546] qlist_free_all+0x97/0x140
[ 107.248881][ T5546] kasan_quarantine_reduce+0x148/0x160
[ 107.251606][ T5546] __kasan_slab_alloc+0x22/0x80
[ 107.254114][ T5546] kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 107.256804][ T5546] getname_flags+0xb8/0x540
[ 107.259055][ T5546] vfs_fstatat+0x43/0x170
[ 107.261116][ T5546] __x64_sys_newfstatat+0x116/0x190
[ 107.263536][ T5546] do_syscall_64+0xfa/0x3b0
[ 107.265588][ T5546] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.268114][ T5546]
[ 107.269162][ T5546] Memory state around the buggy address:
[ 107.271663][ T5546] ffff88801a2ac700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.275167][ T5546] ffff88801a2ac780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.278876][ T5546] >ffff88801a2ac800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 107.282639][ T5546] ^
[ 107.285597][ T5546] ffff88801a2ac880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 107.289218][ T5546] ffff88801a2ac900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 107.292899][ T5546] ==================================================================
[ 107.438746][ T5546] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.441997][ T5546] CPU: 0 UID: 0 PID: 5546 Comm: syz.0.17 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full)
[ 107.448471][ T5546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 107.453573][ T5546] Call Trace:
[ 107.455285][ T5546]
[ 107.456514][ T5546] dump_stack_lvl+0x99/0x250
[ 107.458494][ T5546] ? __asan_memcpy+0x40/0x70
[ 107.460487][ T5546] ? __pfx_dump_stack_lvl+0x10/0x10
[ 107.462741][ T5546] ? __pfx__printk+0x10/0x10
[ 107.464899][ T5546] vpanic+0x281/0x750
[ 107.466692][ T5546] ? preempt_schedule+0xae/0xc0
[ 107.468993][ T5546] ? __pfx_vpanic+0x10/0x10
[ 107.471050][ T5546] ? preempt_schedule_common+0x83/0xd0
[ 107.473607][ T5546] ? preempt_schedule+0xae/0xc0
[ 107.475795][ T5546] ? __pfx_preempt_schedule+0x10/0x10
[ 107.478426][ T5546] panic+0xb9/0xc0
[ 107.480362][ T5546] ? __pfx_panic+0x10/0x10
[ 107.482617][ T5546] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 107.485455][ T5546] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 107.488038][ T5546] check_panic_on_warn+0x89/0xb0
[ 107.490582][ T5546] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 107.493017][ T5546] end_report+0x78/0x160
[ 107.494977][ T5546] kasan_report+0x129/0x150
[ 107.497147][ T5546] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 107.500209][ T5546] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 107.503049][ T5546] kasan_check_range+0x2b0/0x2c0
[ 107.505322][ T5546] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 107.507761][ T5546] __asan_memmove+0x29/0x70
[ 107.509796][ T5546] ext4_xattr_set_entry+0x8e9/0x1e20
[ 107.512408][ T5546] ext4_xattr_block_set+0x872/0x2ac0
[ 107.514776][ T5546] ? fs_reclaim_acquire+0x7d/0x100
[ 107.517128][ T5546] ? __pfx_check_xattrs+0x10/0x10
[ 107.519379][ T5546] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 107.521870][ T5546] ? ext4_xattr_block_find+0x2d4/0x350
[ 107.524176][ T5546] ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[ 107.526889][ T5546] __ext4_expand_extra_isize+0x30d/0x400
[ 107.529749][ T5546] __ext4_mark_inode_dirty+0x46c/0x700
[ 107.533039][ T5546] __ext4_unlink+0x631/0xab0
[ 107.535113][ T5546] ? __pfx___ext4_unlink+0x10/0x10
[ 107.537448][ T5546] ? __pfx___dquot_initialize+0x10/0x10
[ 107.539932][ T5546] ? down_write+0x162/0x1f0
[ 107.542014][ T5546] ext4_unlink+0x216/0x5d0
[ 107.544070][ T5546] vfs_unlink+0x394/0x650
[ 107.546099][ T5546] do_unlinkat+0x345/0x560
[ 107.548112][ T5546] ? __pfx_do_unlinkat+0x10/0x10
[ 107.550260][ T5546] ? getname_flags+0x1e5/0x540
[ 107.552390][ T5546] __x64_sys_unlink+0x47/0x50
[ 107.554409][ T5546] do_syscall_64+0xfa/0x3b0
[ 107.556514][ T5546] ? lockdep_hardirqs_on+0x9c/0x150
[ 107.559152][ T5546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.562355][ T5546] ? clear_bhb_loop+0x60/0xb0
[ 107.564506][ T5546] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.567034][ T5546] RIP: 0033:0x7fa79d18ebe9
[ 107.569012][ T5546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 107.577056][ T5546] RSP: 002b:00007ffd54591a38 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 107.581504][ T5546] RAX: ffffffffffffffda RBX: 00007fa79d3b5fa0 RCX: 00007fa79d18ebe9
[ 107.585249][ T5546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[ 107.588739][ T5546] RBP: 00007fa79d211e19 R08: 0000000000000000 R09: 0000000000000000
[ 107.592448][ T5546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.596289][ T5546] R13: 00007fa79d3b5fa0 R14: 00007fa79d3b5fa0 R15: 0000000000000001
[ 107.599875][ T5546]
[ 107.601586][ T5546] Kernel Offset: disabled
[ 107.603614][ T5546] Rebooting in 86400 seconds..
VM DIAGNOSIS:
19:47:26 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002c3eed0
R8 =ffff8880339d0237 R9 =1ffff1100673a046 R10=dffffc0000000000 R11=ffffffff855080e0
R12=dffffc0000000000 R13=ffffffff99b048e4 R14=ffffffff99df97a0 R15=0000000000000000
RIP=ffffffff8550815c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555565c4e500 ffffffff 00c00000
GS =0000 ffff88808d211000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdc1afb2e9c CR3=000000004e9c9000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffc00000 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000f1d0f55e 0000000061d82e56
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 269a153301dcb40e
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e171a111311101f 1d1c5e111d1e1e13
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d13162d1d060713 5e13444242424242
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000034747865
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303030303030 3078303d657a6973 695f61727478655f 746e000500060006
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c6568636163626d 6f6e2c636f6c6c61 5f61645f6f747561 2c61363030303030
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002c61746f7571
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5e63850ffff0000 01bfc67400000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000